The summary also emphasizes that the updated compliance risk indicators framework has three broad categories: board and management oversight, compliance programs, and violations of law and consumer harm.

The letter’s provisions, the summary notes, took effect March 31. The summary is available to members only.